Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
File:                     qCYCgPNU92LV7fNMisgW4cIHG1k.mft (raw, json)
Hash identifier:          fBmUMpmmpq5YzMTZc4kV89J7J/QF+a7e5ePdJh/0bVs=
Subject key identifier:   20:C2:A9:91:5D:C3:60:EF:73:C2:02:57:D4:B7:0D:6D:48:A9:14:86
Authority key identifier: A8:26:02:80:F3:54:F7:62:D5:ED:F3:4C:8A:C8:16:E1:C2:07:1B:59
Certificate issuer:       /CN=a8260280f354f762d5edf34c8ac816e1c2071b59
Certificate serial:       01962F7436A101C4A4F8EE97606E137CD706
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCYCgPNU92LV7fNMisgW4cIHG1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: qCYCgPNU92LV7fNMisgW4cIHG1k.crl (hash: ocQTAy1f3C+spslyc0dS4uM9BBPkkRbFDFUly7wajw8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:36:a1:01:c4:a4:f8:ee:97:60:6e:13:7c:d7:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8260280f354f762d5edf34c8ac816e1c2071b59
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=20c2a9915dc360ef73c20257d4b70d6d48a91486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:50:4d:2b:24:9c:e2:f8:93:4e:71:94:18:db:
                    f4:1a:52:f2:a8:55:b1:47:73:6f:04:39:33:00:3e:
                    c6:c3:ad:ee:23:c0:93:bd:8f:3f:01:7b:8d:2e:18:
                    0d:46:69:89:be:64:a8:49:88:a9:30:6a:2b:25:d2:
                    90:d1:d8:c0:06:30:be:c7:43:49:15:0f:9b:fe:a8:
                    0c:2a:0e:38:19:8e:ca:dd:f6:e3:0f:57:0d:05:ba:
                    80:20:37:d9:e5:3b:34:2b:76:e9:08:68:9a:73:0a:
                    4c:d1:b4:e9:bd:bc:97:9f:48:74:f6:a9:24:df:e4:
                    a3:62:1d:ce:c1:f5:da:2d:cf:88:ea:4d:36:bd:d0:
                    5d:5d:61:d0:18:1a:51:d2:da:8f:32:42:1a:6b:92:
                    20:f2:64:61:ac:fb:0a:4f:0c:db:1c:3f:08:49:88:
                    d6:66:2f:0d:1a:a7:fa:bf:fd:e4:4f:14:5c:53:67:
                    99:70:f1:40:80:fb:ca:dc:42:58:c2:6e:a4:8a:13:
                    3a:c3:6e:14:97:9b:3a:4e:be:77:11:4c:ce:32:4e:
                    99:28:12:dd:ff:f2:ec:24:51:1d:0c:68:ee:ed:0b:
                    2a:1c:37:4f:8a:19:a8:53:9e:4c:b3:5f:8d:b6:48:
                    8e:9a:ff:80:7b:dd:d2:40:c4:22:89:6a:f3:74:6c:
                    67:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C2:A9:91:5D:C3:60:EF:73:C2:02:57:D4:B7:0D:6D:48:A9:14:86
            X509v3 Authority Key Identifier:
                keyid:A8:26:02:80:F3:54:F7:62:D5:ED:F3:4C:8A:C8:16:E1:C2:07:1B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCYCgPNU92LV7fNMisgW4cIHG1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:00:b8:8f:7e:90:d0:09:9f:90:e2:b0:32:c3:dd:f3:4c:6a:
         2c:e4:8b:41:ce:dd:10:25:3d:c3:44:2b:6a:e6:cb:db:f3:28:
         59:0c:af:6a:1e:a3:0e:de:72:23:af:e5:5f:2b:c5:44:ab:be:
         76:b1:be:62:5a:1f:9f:77:aa:50:5e:e4:a9:fa:2a:9c:a9:49:
         3a:e5:2e:2f:db:ad:85:b3:fb:d0:3f:92:25:f1:55:df:7a:9e:
         ad:01:c4:2a:d9:7d:2b:96:3c:29:f3:3b:fa:17:8a:88:7a:4a:
         96:17:59:1c:47:e3:e2:d0:e4:ef:31:b1:25:f8:25:fe:5f:3d:
         98:8a:d8:3b:75:53:d5:51:ca:80:51:39:33:27:36:ec:a2:02:
         81:1e:7d:78:6e:a2:5b:5c:20:23:73:13:fe:41:1a:64:15:77:
         65:ed:99:67:63:88:a5:c5:25:44:04:bc:65:f8:78:86:b5:77:
         48:13:1e:b8:dc:5a:50:a4:36:04:2c:7f:8d:8e:3a:d8:94:c8:
         d9:fc:30:28:6d:1f:f4:4b:66:67:a5:9d:30:70:03:eb:76:1b:
         15:b1:b7:a9:b4:7f:48:b0:b1:ea:f3:4e:3c:0f:c8:a3:c0:66:
         ac:84:d7:fa:c6:aa:4b:b5:3a:e8:20:9f:24:51:30:f4:69:57:
         54:bc:6d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----